[Please upgrade [X]Emacs or the [X]Emacs Lisp packages on all
platforms -- Raju]
This is an RFC 1153 digest.
(1 message)
----------------------------------------------------------------------
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh"
Content-Disposition: inline
Message-ID: <[EMAIL PROTECTED]>
From: Martin Pitt <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: full-disclosure@lists.netsys.com, bugtraq@securityfocus.com
Subject: [USN-76-1] Emacs vulnerability
Date: Mon, 7 Feb 2005 12:58:32 +0100
--NzB8fVQJ5HfG6fxh
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
===========================================================
Ubuntu Security Notice USN-76-1 February 07, 2005
emacs21 vulnerability
CAN-2005-0100
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog)
The following packages are affected:
emacs21-bin-common
The problem can be corrected by upgrading the affected package to
version 21.3+1-5ubuntu4.2. In general, a standard system upgrade is
sufficient to effect the necessary changes.
Details follow:
Max Vozeler discovered a format string vulnerability in the "movemail"
utility of Emacs. By sending specially crafted packets, a malicious
POP3 server could cause a buffer overflow, which could have been
exploited to execute arbitrary code with the privileges of the user
and the "mail" group (since "movemail" is installed as "setgid mail").
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1-5ubuntu4.2.diff.gz
Size/MD5: 220180 bc57787061b02474dfd803ddbc08e771
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1-5ubuntu4.2.dsc
Size/MD5: 801 f9c6262e8114deeba4430fee03cb7847
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1.orig.tar.gz
Size/MD5: 18112871 83259d856459b473bf7fb6b6cfead0d2
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-common_21.3+1-5ubuntu4.2_all.deb
Size/MD5: 10984378 550a747169ae12ba65f568379137dccb
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-el_21.3+1-5ubuntu4.2_all.deb
Size/MD5: 7149862 b01a5203171f92f03b55c67fcf52dc67
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.3+1-5ubuntu4.2_amd64.deb
Size/MD5: 148576 4c04484d1dead472dff48afa013bd749
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.3+1-5ubuntu4.2_amd64.deb
Size/MD5: 1940154 e05b39ee168bb8480b178cf9e953bdb2
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1-5ubuntu4.2_amd64.deb
Size/MD5: 2158448 c166427b672d77108eb951019b7e3d72
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.3+1-5ubuntu4.2_i386.deb
Size/MD5: 131160 07d9fe77aa1807cf6fe0d4eeb1fe8838
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.3+1-5ubuntu4.2_i386.deb
Size/MD5: 1794792 c2795d591670c1c7db8fc57088840935
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1-5ubuntu4.2_i386.deb
Size/MD5: 1978432 f5085f2d945c08dc5230cecde8236946
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21-bin-common_21.3+1-5ubuntu4.2_powerpc.deb
Size/MD5: 144576 16a77927200e2ae8eb01b7c78062a38e
http://security.ubuntu.com/ubuntu/pool/universe/e/emacs21/emacs21-nox_21.3+1-5ubuntu4.2_powerpc.deb
Size/MD5: 1881976 c48d5ce477a7092e7518a446f77caab5
http://security.ubuntu.com/ubuntu/pool/main/e/emacs21/emacs21_21.3+1-5ubuntu4.2_powerpc.deb
Size/MD5: 2087044 8d32d0c234217ac394b89066b0669934
--NzB8fVQJ5HfG6fxh
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFCB1foDecnbV4Fd/IRAseJAJ0d5EMgdZRg0yuffX7ZLoy99zLrYQCfbbLk
gbaNt6iC2f5rwMDuI4YJj84=
=YSXI
-----END PGP SIGNATURE-----
--NzB8fVQJ5HfG6fxh--
------------------------------
End of this Digest
******************
--
Raj Mathur [EMAIL PROTECTED] http://kandalaya.org/
GPG: 78D4 FC67 367F 40E2 0DD5 0FEF C968 D0EF CC68 D17F
It is the mind that moves
_______________________________________________
ilugd mailinglist -- ilugd@lists.linux-delhi.org
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi
http://www.mail-archive.com/ilugd@lists.linux-delhi.org/
